Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Administration Manual

Page: 68 / 216

68 OES 2 SP1: Novell iFolder 3.7 Administration Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
Novell iFolder
System
Configuration
Š
The iFolder Default Administrator: Specify the username for the default
iFolder Admin user. Use the full distinguished name of the iFolder Admin
user. For example:
cn=admin,o=acme
Š
iFolder Admin Password: Specify a password for the iFolder Admin
user.
Š
Verify iFolder Admin Password: Type the password for the iFolder
Admin user again.
Š
LDAP proxy User: Specify the full distinguished name of the LDAP
Proxy user. For example:cn=iFolderproxy,o=acme. This user must have
the Read right to the LDAP service. The LDAP Proxy user is used for
provisioning the users between the iFolder Enterprise Server and the
LDAP server. If the Proxy user does not exist, it is created and granted the
Read right to the root of the tree. If the Proxy user already exists, but the
given credentials don’t match, then a new Proxy user is automatically
created. The Proxy user's domain name (dn) and password are stored by
the iFolder. If the Active Directory is the LDAP source, ensure that the
iFolder Proxy user is created using Active Directory tools before you
specify it here.
NOTE: LDAP Proxy user and LDAP proxy user Password options are
disabled for all iFolder upgrade scenarios. For more information on
Upgrade, see “
Upgrading iFolder 3.x ” and “ Upgrading iFolder 3.6 ” in the
OES 2 SP1: Migration Tool Administration Guide .
Š
LDAP proxy user Password: Specify a password for the LDAP Proxy
user. By default, it is YaST-generated password.
IMPORTANT: You are recommended not to use the YaST-generated
default password. You must specify the password for the Proxy user.
Š
LDAP Search Context Click Add , then specify an LDAP tree context to
be searched for users and provisioning them in to iFolder. For example,
o=acme, o=acme2, or o=acme3. If no context is specified, only the
iFolder Admin user is provisioned for services during the install. The
recommended settings must have a mutually exclusive LDAP search
context list with other participating servers in the iFolder domain.
IMPORTANT: Ensure that the LDAP search context you have specified is
present in the LDAP server. If the LDAP search context is not present, the
iFolder installation fails.
Install Settings Description